Simplyweb (ABN 35 168 124 306) builds websites, Pulse (our customer management system) and automation for Australian service businesses. In this policy "we", "us" and "our" mean Simplyweb.
This policy explains what personal information we collect, why we collect it, and what we do with it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Who this policy covers
- People who visit simplyweb.au or book.simplyweb.au.
- People who book a call or a free audit with us.
- Our clients and their staff, when they use Pulse, Pulse Ads and our other tools.
- Our clients' own customers, whose details our clients keep in Pulse. The client business is responsible for that information. We handle it on the client's behalf, under our agreement with them, and only to provide our service. If you're a customer of one of our clients, contact that business first.
What we collect
- Contact details: your name, email address, mobile number and business name.
- Booking answers: what your business does, how big your team is and what takes up your time. We save your details as soon as you enter them, even if you don't finish booking, so we can follow up.
- Where you came from: campaign tags and ad click identifiers (such as Google's click ID) in the link you used to reach our site.
- Client account information: sign-in details, a record of what was done in the account and by whom, and how much of each paid service is used (texts, calls, AI and voice agent use).
- Information our clients keep in Pulse: their customers' contact details, enquiries, bookings, messages, calls, quotes and invoices. Some clients, such as health clinics, may keep health information in Pulse. We treat it as sensitive information and handle it only as that client directs.
- Google Ads data: for clients whose ads we manage, the campaigns, settings and performance figures in their Google Ads account. See "Google user data" below.
- Technical information: our hosting providers log details such as IP address, browser type and the pages requested. We use these logs to keep our services running and secure.
We collect most of this from you directly. We get some from our clients (about their customers), from Google (for connected Google Ads accounts) and from the services our clients connect to Pulse.
How we use it
- To answer your enquiry, book your call and send you the calendar invite.
- To provide, support and improve our websites, Pulse, Pulse Ads and automation for our clients.
- To bill our clients, including for the texts, calls and AI they use.
- To run and measure our own advertising.
- To keep our services secure, prevent misuse and meet our legal obligations.
We don't sell personal information. If we send you marketing emails, each one will have a way to unsubscribe, or you can email us at nicholas@simplyweb.au.
Google user data
Pulse Ads is our tool for running Google Ads for our clients. When a Simplyweb staff member connects a Google Ads account by signing in with Google, Pulse Ads can read and change that account's campaigns and reports through the Google Ads API.
- We use this data only to manage and report on that client's ads, and to send Google the conversions (such as a qualified lead or a sale) that the client records in Pulse.
- We don't sell it, use it for our own advertising or use it for anything unrelated to managing that client's ads.
- Our staff look at it only to manage the client's account, to deal with a security issue, or when the law requires it.
- Customer details sent to Google to match conversions (enhanced conversions) are scrambled with one-way encryption (SHA-256) before they leave our systems.
- Sign-in tokens for Google are stored encrypted and are never sent to a web browser.
- Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
- You can remove our access at any time in your Google Account settings or by unlinking your Google Ads account from ours. When access is removed, we delete the stored sign-in token.
Who we share it with
We share personal information with the service providers who run parts of our services for us, and only so they can do that:
- Vercel, which hosts our websites and apps.
- Supabase, which hosts our databases.
- Google, for calendar bookings and Google Ads.
- Twilio, which sends and receives texts and calls made through Pulse.
- Stripe, which processes card payments.
- AI and voice agent providers, which process the text or audio needed for Pulse's AI features.
- Our accounting software provider.
We may also share information with our professional advisers, when the law requires it, or with a buyer if our business is sold.
Storage and overseas disclosure
We store our main data in Australia, in Sydney. Some of our service providers, including Vercel, Supabase, Google, Twilio and Stripe, are based in the United States. They may process or access information outside Australia, for example to route a text message or to provide support. We take reasonable steps to make sure they protect it in line with the Australian Privacy Principles.
How we keep it secure
- Information is encrypted while it travels between your device and our services.
- Only the people who need it to do their job can reach it, and staff accounts use two-step sign-in.
- Each client business can only see its own information. Our database enforces this.
- Changes made in Pulse are recorded, with who made them and when.
If a data breach is likely to cause serious harm, we'll tell the people affected and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.
How long we keep it
We keep personal information only as long as we need it for the reasons above, or as long as the law requires (for example, tax records). When we no longer need it, we delete it or remove anything that identifies you. When a client leaves, we give them a copy of their data and then delete it.
Cookies
simplyweb.au doesn't use analytics or advertising cookies at the moment. Pulse uses cookies to keep you signed in. If we add analytics or advertising tracking, we'll update this policy first.
Seeing or correcting your information
You can ask for a copy of the personal information we hold about you, or ask us to correct it. Email us at nicholas@simplyweb.au. We'll reply within 30 days and there's no charge. If your information is held for one of our clients, we'll pass your request on to them.
Questions and complaints
Contact us by email at nicholas@simplyweb.au or call 0439 224 861. We'll respond to a complaint within 30 days. If you're not happy with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
Changes to this policy
We'll update this policy when our services or the law change. The date at the top shows when it last changed.